CVE-2009-0242

ganglia: gmetad temporary DoS via resource consumption

View on CVE.org
Published Jan 21, 2009 CVSS n/a EPSS n/a KEV · Not listed
Description
gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to (1) perform excessive CPU computation and (2) send the entire tree, which consumes network bandwidth. NOTE: the vendor and original researcher have disputed this issue, since legitimate requests can generate the same amount of resource consumption. CVE concurs with the dispute, so this identifier should not be used

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Aug 7, 2017, 12:57 PM
Reserved
Jan 20, 2009, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Jan 21, 2009, 11:30 AM
Modified
Nov 7, 2023, 2:03 AM

View source JSON

Severity
Low
Public date
Jan 13, 2009, 12:00 AM

View source Bugzilla JSON

No data.